Will the agent only scan at the scheduled scan time, or does it scan in other scenarios as well?

The agent does not limit itself to scheduled scans. 

In addition to running at the configured scan schedule, the agent will also trigger scans in the following cases:

• When a device is powered on or rebooted → the agent automatically performs a scan.

• After patch remediation or automation → once patching is completed, the device reboots and the agent initiates a new scan to verify compliance.

• When a manual scan is initiated from the Saner CVEM console → the agent executes an immediate scan on the selected device(s).